DoorDash
- The documents do not say whether your data trains AI.
- Your data is used for personalized ads, including by third-party ad companies.
- Data is shared with partners and affiliates; you can opt out.
- The documents do not say who can read your content.
DoorDash collects browsing and device data for ads, lets you opt out of sale/sharing.
Agent Trust Hub uses AI and may make mistakes. Review reports and confirm their contents before relying on them.
Collected
Contact info, orders, device IDs, IP address, browsing history, and sometimes location.
Read the exact line
Privacy policy
“Online activity, such as browsing history, websites/web pages/web content viewed or interacted with, etc. (as applicable)”
Training
They use it for orders, ads, cookies, and improving services, including interest-based ads.
Read the exact line
Privacy policy
“to collect information about your activities over time and across third party websites or other online services in order to deliver content and advertising tailored to your interests”
Sharing
Merchants, Dashers, DoorDash companies, ad vendors, and others in a sale of the business.
Read the exact line
Privacy policy
“Third parties who help us establish and administer our relationship with you and perform and deliver the Services, including the applicable Merchant(s) and Dasher(s) to fulfill your order”
Kept
They do not give a fixed time; they keep it based on purpose, law, and claims periods.
Read the exact line
Privacy policy
“Our retention of your personal information may vary based upon the nature of our relationship with you”
Controls
You can request access or deletion and opt out of sale, sharing, and targeted ads.
Read the exact line
Privacy policy
“To opt-out of the sale or sharing of personal information and targeted advertising, please use the Do Not Sell or Share Link on www.doordash.com”
Fine print
Privacy can change without notice.
Read the exact line
Privacy policy
“This Policy may be subject to updates from time to time with or without notice.”
Expand “Read the exact line” to see the source alongside the explanation.
What you can turn off
The controls and opt-outs their own documents describe, and where they say to find them.
Opt out of sale, sharing, and targeted ads
Do Not Sell or Share Link on www.doordash.com or https://www.doordash.com/consumer/personalize
or a copy of your data
User links in Section 8, or privacy@doordash.com / (855) 973-1040
Turn off ad personalization in the app
Marketing choices in the privacy section of the User account (toggle)
If a switch is not where they say, the deletion request above still applies.
Line by line
The lines that matter most, worst first.
They can change the privacy rules and do not promise to tell you first.
Read the exact line
Privacy policy
“This Policy may be subject to updates from time to time with or without notice.”
For example, they could start using more of your browsing data for ads and you might only find out if you re-read the policy.
If you keep using DoorDash after a change, they treat that as you agreeing.
Read the exact line
Privacy policy
“Your continued use of our Services after any updates to this Policy constitutes your agreement and acceptance of this Policy as updated.”
For example, if you order food after they update the policy, they say you accepted the new rules.
They can record how you move around the site, including mouse movements and scrolling.
Read the exact line
Privacy policy
“When we use session replay technology, we may collect on a real-time basis information on how you use and navigate the Services.”
For example, they may replay you scrolling a restaurant menu even though they say they do not collect keystrokes.
Cookies track you across sites so ads can follow your interests.
Read the exact line
Privacy policy
“to collect information about your activities over time and across third party websites or other online services in order to deliver content and advertising tailored to your interests”
For example, looking at pizza on DoorDash could lead to pizza ads on other websites.
They say the products come with no .
Read the exact line
Terms of service
“THE DOORDASH PRODUCTS AND ANY RELATED SERVICES ARE PROVIDED “AS IS."”
For example, if the merchant portal is down during dinner rush, they disclaim that kind of guarantee.
Even if you ask them to delete, they may keep some records if the law allows.
Read the exact line
Privacy policy
“we may retain personal information even after receiving and processing a right of deletion request if such retention is permitted or required under applicable data protection and privacy laws.”
For example, they may keep a log that you asked for deletion plus data they say they need for legal claims.
Users can turn off sale, sharing, and targeted ads through a specific link.
Read the exact line
Privacy policy
“To opt-out of the sale or sharing of personal information and targeted advertising, please use the Do Not Sell or Share Link on www.doordash.com or go to https://www.doordash.com/consumer/personalize.”
For example, you can open that page and opt out so third parties get less of your browsing profile.
They set a 16+ line but it is based on not knowingly collecting, not a strong ID check.
Read the exact line
Privacy policy
“Our Services are not intended for children under 16 years of age, and we do not knowingly collect personal information from children under the age of 16.”
For example, a 15-year-old could still make an account if they do not admit their age.
They say they use security controls, but they also say nothing is fully secure.
Read the exact line
Privacy policy
“DoorDash has implemented administrative, organizational, technical, and physical security controls that are designed to safeguard personal information.”
For example, they ask you to use a strong password and tell them if you think your account was hacked.
Words to know
Legal words from the lines above, in plain English.
- third parties
- Any company or person other than you and the app, such as advertisers, partners or analytics firms. For example, an analytics company that receives a record of every screen you tap is a third party.
- retention
- How long a company keeps your data before deleting it. For example, a policy might keep your messages for 30 days after you delete them, or for as long as it likes.
- personal data
- Any information that is about you or can be linked to you, from your name to your phone's ID. For example, your email, your IP address and the list of apps on your phone are all personal data.
- opt out
- Something is on by default and stays on until you find the setting and turn it off. For example, your chats may be used for training unless you go into settings and switch it off.
- sell or share
- Under California law, selling means passing your data to others for money or other value; sharing means passing it on for targeted ads. For example, letting an ad network use your browsing history in return for ad space counts as a sale.
- targeted advertising
- Ads chosen for you based on what you have done across other apps and websites, not just this one. For example, you look at shoes in one app and see shoe ads in a totally different app the next day.
How we got here · grade F · score 32/100 · 15 of 15 policy answers backed by a verified quote · 5 not stated
What does the app collect beyond what it needs to work?
They collect contact and order data plus device IDs, IP, browsing history, cookies, and session replay of how you use the site.
Does it record your voice, face or body, and what happens to that?
Not stated in the documents.
Are your chats and uploads used to train AI models, and is that off by default?
Not stated in the documents.
Can employees or contractors read your conversations, and when?
Not stated in the documents.
Are you profiled or tracked for advertising?
They and third-party vendors use cookies and device IDs for interest-based and cross-device ads, with opt-outs.
Do they sell or share your data, and can you opt out?
They share with service partners and for ads; users can opt out of sale or sharing. They say they do not sell Non-User data.
What rights do they take over what you type and what the AI makes?
Merchant terms give DoorDash a sublicensable license to merchant content and a perpetual license to feedback; consumer content licenses are not spelled out here.
How long do they keep your data after you delete it, and can you delete it in the app?
Deletion is by a web form or email. They keep data based on purpose and law and may keep some after a deletion request.
Does it build a lasting memory or profile of you, and can you see, edit or turn it off?
Not stated in the documents.
Do they commit to basic security, and have they leaked data?
They describe administrative, technical, and physical controls but say they cannot guarantee security.
Is there a real age gate, and are teens protected?
Services are not intended for children under 16 and they say they do not knowingly collect that data.
Will they tell you when the rules change, and is the policy specific?
The privacy policy may update with or without notice, and continued use means you accept. Merchant terms say they will notify of material revisions.
Can they close your account without warning, and can you get your data out first?
DoorDash may end a merchant agreement for any reason at any time upon written notice. No consumer export path is described here.
If something goes wrong, who pays?
Products are as-is, liability is capped, and merchants must indemnify DoorDash for many third-party claims.
Do subscriptions renew on their own, and can you get a refund?
Not stated in the documents.
The privacy policy is 4,791 words at a professional or legal expert level (Flesch reading ease 15.1); the terms are 12,765 words at a professional or legal expert level.
